This vulnerability (CVE-2026-5511) affects the Archer AX72 (SG) v1.0 router from TP-Link Systems Inc. The network diagnostic feature in the device's web management interface improperly processes invalid user input, leading to the generation of error messages that reveal diagnostic command usage details. An attacker with administrative privileges can exploit this to confirm the presence of the diagnostic utility and learn its valid command-line syntax and options. The exposure is limited and does not disclose sensitive system information. The CVSS 4.0 base score is 4.6 (medium severity), reflecting local attack vector, low complexity, no user interaction, and limited confidentiality impact. No patch or official fix has been documented as of the publication date.

The impact is limited to information disclosure of diagnostic command usage syntax and options. This does not include sensitive system data or credentials. The vulnerability requires administrative privileges, limiting the scope of potential attackers. There are no known exploits in the wild. The information disclosed could potentially aid an attacker in further reconnaissance but does not directly compromise system confidentiality, integrity, or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is documented, administrators should monitor TP-Link advisories for updates. Given the requirement for administrative privileges to exploit, restricting administrative access to trusted personnel and secure networks is recommended until a fix is available.